CVE-2024-42512

HighCVSS 8.6

Published: 10/02/2025(UTC)Updated: 15/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

48th percentile - higher than 48% of all known CVEs

Summary

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Risk Assessment

An attacker may gain unauthorized access to the OPC UA application, potentially compromising the confidentiality and integrity of industrial data.

Recommendation

Upgrade OPC UA .NET Standard Stack to version 1.5.374.158 or later and disable the deprecated Basic128Rsa15 policy.

Other vulnerabilities in OPC UA .NET Standard Stack

CVE-2024-42513Medium
A vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.

Original NVD description (English source)

Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS